Yeti-platform vulnerabilities
Products
- Yeti 8
Newest
- yeti-platform yeti Yeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export 7.1 High
- yeti-platform yeti Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write 8.3 High
- yeti-platform yeti Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data 7.5 High
- yeti-platform yeti Yeti: Authenticated AQL injection via unvalidated search sorting and filter_aliases parameters 7.6 High
- yeti-platform yeti Yeti through 2.11.0 Missing Authorization on RBAC Relationship Deletion 7.2 High
- yeti-platform yeti yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET). 7.5 High
- yeti-platform yeti A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server. 7.3 High
- yeti-platform yeti Yeti affected by a Potential Denial of Service due to the One Milion Unicode characters attack 5.3 Medium